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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is speciried above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 
• Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 

Any reply received by the Office later than three months after the mailing date of this communication, even If timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

Responsive to communication(s) filed on . 

2a)n This action is FINAL. 2b)M This action is non-final, 

3) 0 Since this application is in condition for allowance except for fomrial matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) ^ Claim(s) 1-44 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) n Claim(s) is/are allowed. 

6) 13 Claim(s) 1-44 is/are rejected. 
?)□ Claim(s) is/are objected to. 

8) n Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) ^ The specification is objected to by the Examiner. 

10) 13 The drawing(s) filed on 06 February 2002 Is/are: a)3 accepted or b)^ objected to by the Examiner. 

Applicant may not request that any objection to the drawing{s) be held in abeyance. See 37 CFR 1.85(a), 
Replacement drawing sheet(s) including the connection is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or fomn PTO-1 52. 

Priority under 35 U.S.C. § 119 

12) 0 Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 
a)n All b)n Some * c)^ None of: 

1 .□ Certified copies of the priority documents have been received. 

2.n Certified copies of the priority documents have been received in Application No. . 



3.n Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 
Specification 

1 . The abstract of the disclosure is objected to because it contains reference 
numbers. Please remove the reference numbers and the accompanying parentheses. 
Correction is required. See MPEP § 608.01(b). 

Claim Rejections - 35 USC § 102 

2. The following Is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an International application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

3. Claims 1-7. 10-15. 17-22. 25-35. and 37-43 are rejected under 35 U.S.C. 102(e) 
as being anticipated by Harif (U.S. Patent Pub. No. 2002/0133716). 

Regarding claims 1. 17. and 27-29. Harif teaches a method/apparatus for 
authenticating an entity in a vehicle, the method/apparatus comprising: 

• A first, trusted entity residing in the vehicle (fig. 1 , ref . num 1 4); 

• A second entity residing in the vehicle and in communication with the trusted 
entity (fig. 1, ref. num 18); and 
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• Wherein the trusted entity receives a service request, determines whether the 
second entity is an authenticated entity in response to the service request, and, 
when the second entity is not an authenticated entity, authenticates the second 
entity to produce and authenticated entity (fig. 6, ref. num 1 06 and paragraph 
0049). 

Regarding claims 2. 18. and 30 , Harif teaches wherein the trusted entity stores a 
list of authenticated entities and determines whether the second entity is an 
authenticated entity by reference to the list (paragraph 0032, discussion on certificates). 

Regarding claims 3. 19. and 31 . Harif teaches wherein the trusted entity stores a 
list of authenticated entities and adds the second entity to the list when the trusted entity 
authenticates the second entity (paragraph 0038). 

Regarding claims 4. 25. and 35 . Harif teaches further comprising a step of, when 
the entity is an authenticated entity, granting the request for service (fig. 6, ref. num 
108), 

Regarding claims 5. 20. and 32 . Harif teaches wherein the step of authenticating 
the entity comprises steps of requesting, from the entity, a certificate comprising a 
vehicle manufacturer signature, receiving a message comprising the requested 
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certificate, and determining whether the entity is an authenticated entity based on the 
received message (paragraph 0032). 

Regarding claims 6. 21. and 37 . Harif teaches wherein the message comprising 
the requested certificate further comprises an entity signature and an entity 
manufacturer signature (paragraph 0032, the certificate contains a signature from the 
manufacturer). 

Regarding claims 7. 22. 33. and 34 . Harif teaches wherein the step of 
authenticating the entity further comprises steps of verifying at least one of the vehicle 
manufacturer signature, the entity signature, and the entity manufacturer signature, and 
wherein the step of determining whether the entity is an authenticated entity comprises 
a step of determining whether the entity is an authenticated entity based on the 
verification of at least one of the vehicle manufacturer signature, the entity signature, 
and the entity manufacturer signature (fig. 6, ref. num 106 and paragraph 0049). 

Regarding claim 10 . Harif teaches further comprising a step of determining 
whether to reprogram the entity when the second entity is an authenticated entity 
(paragraph 0037). 

Regarding claims 11 and 40 . Harif teaches wherein the step of determining 
whether to reprogram the entity comprises steps of retrieving vehicle system status 
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information from the entity, and determining whether to reprogram the entity based on 
the retrieved vehicle system status information (paragraph 0037, identification tags). 

Regarding claims 12 and 41 . Harif teaches further comprising steps of in 
response to a determination to reprogram the entity, reprogramming the entity with new 
software, when the entity is reprogrammed, executing the new software by the entity to 
produce a result, conveying the result to the trusted entity, and determining whether the 
reprogramming is successful based on the result (paragraph 0037 and fig. 6, repeating 
the entire authentication process). 

Regarding claims 13. 14. 26. and 42 . Harif teaches wherein the entity is a vehicle 
system that comprises vehicle system status information and wherein the method 
further comprises steps of retrieving vehicle system status information from the entity, 
transmitting the retrieved vehicle system status information, and receiving new software 
in response to the transmission of vehicle system status information (paragraph 0037, 
identification tags and fig. 6, repeating the entire authentication process). 

Regarding claims 15 and 43 . Harif teaches wherein the vehicle status information 
comprises at least one of a current date, a current time, a current location of the vehicle, 
a current mileage of the vehicle, a vehicle identification number, and an engine 
diagnostic code (paragraph 0016). 
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Regarding claim 38 . Harif teaches wherein when the second entity is an 
authenticated entity, the trusted entity determines whether to reprogram the entity and, 
in response to a determination to reprogram the entity, reprograms the second entity 
with new software (paragraph 0037 and fig. 6, repeating the entire authentication 
process). 

Regarding claim 39 . Harif teaches wherein the second entity is a vehicle system 
that comprises vehicle system information and wherein the trusted entity retrieves 
vehicle system status information from the vehicle system and determines whether to 
reprogram the entity based on the vehicle system information (paragraph 0037, 
identification tags). 

Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

5. Claims 8. 9. 16. 23. 24. 36. and 44 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Harif (U.S. Patent Pub. No. 2002/0133716) in view of Menezes et al. 
("Handbook of Applied Cryptography," CRC Press LLC, 1997, pps. 397-405 & 493-495). 
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Regarding claims 8. 23. and 36 . Harif teaches all the limitations of claims 1,17, 
and 27, respectively, above. However, Harif does not teach authenticating by 
generating a random number and using a challenge-response protocol. 

Menezes et aL teaches wherein the step of authenticating the entity comprises 
steps of generating a first random number, conveying, to the entity, the first random 
number and a request that the entity send a certificate comprising a vehicle 
manufacturer signature, receiving a message comprising the certificate having a vehicle 
manufacturer signature and further comprising an entity signature, and entity 
manufacturer signature, the first random number, and a second random number, and 
wherein the step of determining whether the entity is an authenticated entity comprises 
a step of determining whether the entity is an authenticated entity based on the 
verification of at least one of the vehicle manufacturer signature, the entity signature, 
and the entity manufacturer signature (page 404, section (i)). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine authenticating an entity by a challenge-response 
protocol, as taught by Menezes . with the method/apparatus of Harif . It would have been 
obvious for such modifications because the challenge-response protocol allows an 
entity to be authenticated, that is, prove they are who they say they are, without 
disclosing the actual secret that is being proved (see page 397, section 10.3 of 
Menezes et aL). 
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Regarding claims 9. 16. 24. and 44 . Harif leaches all the limitations of claims 1 , 
17, and 27, respectively, above. However, Harif does not teach the use of session 
keys. 

Menezes et al. teaches further comprising steps of when the entity is an 
authenticated entity, generating a session key, and securely conveying the session key 
to the authenticated entity (page 494, Motivation for use of session keys). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine generating a session key, as taught by Menezes . with 
the method/apparatus of Harif . It would have been obvious for such modifications 
because session keys are good in cases where only a short duration of the key use is 
needed, such as that of updating/reprogramming a programmable key (see page 494 of 
Menezes etal.). 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Brandon Hoffman whose telephone number is 571-272- 
3863. The examiner can normally be reached on M-F 8:30 - 5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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